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| APPLICATION NO. | FILING DATE | FIRST NAMED INVENTOR | ATTORNEY DOCKET NO. | CONFIRMATION NO. 

10/687,694 10/20/2003 Matthew Murray Williamson 200207546-3 2845 

TITLE OF INVENTION: PROPAGATION OF VIRUSES THROUGH AN INFORMATION TECHNOLOGY NETWORK 



| APPLN. TYPE | SMALL ENTITY | ISSUE FEE DUE | PUBLICATION FEE DUE | PREV. PAID ISSUE FEE | TOTAL FEEfS; DUE | DATE DUE | 

nonprovisionai NO $1510 $300 $0 $1810 06/20/2011 

THE APPLICATION IDENTIFIED ABOVE HAS BEEN EXAMINED AND IS ALLOWED FOR ISSUANCE AS A PATENT. 
PROSECUTION ON THE MERITS IS CLOSED . THIS NOTICE OF ALLOWANCE IS NOT A GRANT OF PATENT RIGHTS. 
THIS APPLICATION IS SUBJECT TO WITHDRAWAL FROM ISSUE AT THE INITIATIVE OF THE OFFICE OR UPON 
PETITION BY THE APPLICANT. SEE 37 CFR 1.313 AND MPEP 1308. 

THE ISSUE FEE AND PUBLICATION FEE (IF REQUIRED) MUST BE PAID WITHIN THREE MONTHS FROM THE 
MAILING DATE OF THIS NOTICE OR THIS APPLICATION SHALL BE REGARDED AS ABANDONED. THIS 
STATUTORY PERIOD CANNOT BE EXTENDED . SEE 35 U.S.C. 151. THE ISSUE FEE DUE INDICATED ABOVE DOES 
NOT REFLECT A CREDIT FOR ANY PREVIOUSLY PAID ISSUE FEE IN THIS APPLICATION. IF AN ISSUE FEE DAS 
PREVIOUSLY BEEN PAID IN THIS APPLICATION (AS SHOWN ABOVE), THE RETURN OF PART B OF THIS FORM 
WILL BE CONSIDERED A REQUEST TO REAPPLY THE PREVIOUSLY PAID ISSUE FEE TOWARD THE ISSUE FEE NOW 
DUE. 



HOW TO REPLY TO THIS NOTICE: 



I. Review the SMALL ENTITY status shown above. 

If the SMALL ENTITY is shown as YES, verify your current 
SMALL ENTITY status: 

A. If the status is the same, pay the TOTAL FEE(S) DUE shown 
above. 

B. If the status above is to be removed, check box 5b on Part B - 
Fee(s) Transmittal and pay the PUBLICATION FEE (if required) 
and twice the amount of the ISSUE FEE shown above, or 



If the SMALL ENTITY is shown as NO: 



A. Pay TOTAL FEE(S) DUE shown above, or 



B. If applicant claimed SMALL ENTITY status before, or is now 
claiming SMALL ENTITY status, check box 5a on Part B - Fee(s) 
Transmittal and pay the PUBLICATION FEE (if required) and 1/2 
the ISSUE FEE shown above. 



II. PART B - FEE(S) TRANSMITTAL, or its equivalent, must be completed and returned to the United States Patent and Trademark Office 
(USPTO) with your ISSUE FEE and PUBLICATION FEE (if required). If you are charging the fee(s) to your deposit account, section "4b" 
of Part B - Fee(s) Transmittal should be completed and an extra copy of the form should be submitted. If an equivalent of Part B is filed, a 
request to reapply a previously paid issue fee must be clearly made, and delays in processing may occur due to the difficulty in recognizing 
the paper as an equivalent of Part B. 

III. All communications regarding this application must give the application number. Please direct all communications prior to issuance to 
Mail Stop ISSUE FEE unless advised to the contrary. 

IMPORTANT REMINDER: Utility patents issuing on applications filed on or after Dec. 12, 1980 may require payment of 
maintenance fees. It is patentee's responsibility to ensure timely payment of maintenance fees when due. 

Page 1 of 3 



PTOL-85 (Rev. 02/11) 



PART B - FEE(S) TRANSMITTAL 

Complete and send this form, together with applicable fee(s), to: Mail Mail Stop ISSUE FEE 

Commissioner for Patents 
P.O. Box 1450 

Alexandria, Virginia 22313-1450 
or Fax (571)-273-2885 

INSTRUCTIONS: This form should be used foi tiansmitting the IS SI I 1 ! n i I i i i K , !< c 111 ~ uired Bl i I thiough 5 should be completed where 
appropriate. All further correspondence including the Patent. ad\ance orders and notification of maintenance fees will be mailed to the current com p, uden , iddi i 
indicated unless corrected below or directed otherw ise in Block 1. by (a) specifying a new correspondence address: and/or (b) indicating a separate "FEE ADDRESS" for 
fee notifications. 
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HEWLETT-PACKARD COMPANY 
Intellectual Property Administration 
3404 E. Harmony Road 
Mail Stop 35 

FORT COLLINS, CO 80528 


Note: A certificate of mailing can only be used for domestic mailings of the 
eel si Transmittal. This certificate cannot be used for any other accompany ina 
wpers. Each additional paper, such as an assignment or formal draw ing, musl 
lave its own certificate of mailing or transmission. 

Certificate of Mailing or Transmission 

hereb\ cerlih thai litis 1 eel si liansmillal is beins; deposited with the United 
Stales Postal Sen ice with sufficient postage foi first class mail in an err elope 
iddressed to the Mail Slop 1SS 1 1 1 1 j T address abo\e. or beina facsimile 
transmitted to the USPTO (571) 273-2885, on the date indicated below. 
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10/687,694 10/20/2003 Matthew Murray Williamson 

TITLE OF INVENTION: PROPAGATION OF VIRUSES THROUGH AN INFORMATION TECHNOLOGY NETWORK 



APPI.N. TYPE 



SMALL ENTITY 



ISSUE FEE DUE I PUBLICATION FEE DUE PREV. PAID ISSUE FEE TOTAL FEE(S) DUE 



CLASS-SUBCLASS 



MORAN, RANDAL D 



2435 



. Chan tie of correspondence address or indication ol "1 ee Address" (37 
:FR 1.363). 

□ < 'hangc of correspondence address (or Change of Correspondence 
Address lorm PTO/SIS/122) attached. 

□ "Fee Address" indication (or "Fee Address" Indication form 

PT< VSB/47; Rev 03-02 or more recent) attached. Use of a Customer 
Number is required. 



2. For printing on the patent front page, list 

(1) the names of up to 3 registered patent attorneys 
or agents OR, alternatively, 

(2) the name of a single firm (having as a member a 
registered attorney or agent) and the names of up to 
2 registered patent attorney s or agents. If no name is 
listed, no name will be printed. 



3. ASSIGNI <l i N AMI •! AND Rl S 1 1 )] •NCI ■ 1 )A1 A TO BE PRINTED ON THE PATENT (print or type) 



recordation as 
(A) NAME OF ASSIGNEE 



(B) RESIDENCE: (CITY and STATE OR COUNTRY) 



Please check the appropriate assignee category or categories twill not be printed on the patent) : □ Individual □ Corporation or other private group entity □ Government 

4a. The following fee(s) are submitted: 4b. Payment of Fee(s ): (Please first reapply any previously paid issue lee shown above) 

□ Issue Fee □ A check is enclosed. 

□ Publication 1 <cc (No small entity discount permitted) □ Payment by credit card. Form PTO-2038 is attached. 

□ Advance Order - # of Copies □The Director is hereb\ aulhori/ed to charge the required feels), any deficiency, or credit any 

overpayment, to Deposit Account Number (enclose an extra copy of this form). 

5. Change in Entity Status (from status indicated above) 

□ a. Applicant claims SMALL ENTITY status. See 37 CFR 1.27. □ b. Applicant is no longer claiming SMALL ENTITY status. See 37 CFR 1.27(g)(2). 



Authorized Signature Date _ 

Typed or printed name Registr 

cTTiT. 

ake I". 

id Trademark Office. U.S. Department of Commerce. I 

a 22313-1450. DO NOT SI 1 II SO COMP1 I 1)1 I IO Till \DDR1 I) T< ( imi Ml I lei i< B 14 0 

Alexandria, Virginia 22H3- 1450. 

Under the Paperwork Reduction Act of 1995. no persons are required to respond to a collection of information unless ii displays a valid OMB control number. 
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Matthew Murray Williamson 
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Determination of Patent Term Adjustment under 35 U.S.C. 154 (b) 

(application filed on or after May 29, 2000) 

The Patent Term Adjustment to date is 771 day(s). If the issue fee is paid on the date that is three months after the 
mailing date of this notice and the patent issues on the Tuesday before the date that is 28 weeks (six and a half 
months) after the mailing date of this notice, the Patent Term Adjustment will be 771 day(s). 

If a Continued Prosecution Application (CPA) was filed in the above-identified application, the filing date that 
determines Patent Term Adjustment is the filing date of the most recent CPA. 

Applicant will be able to obtain more detailed information by accessing the Patent Application Information Retrieval 
(PAIR) WEB site (http://pair.uspto.gov). 

Any questions regarding the Patent Term Extension or Adjustment determination should be directed to the Office of 
Patent Legal Administration at (571)-272-7702. Questions relating to issue and publication fee payments should be 
directed to the Customer Service Center of the Office of Patent Publication at l-(888)-786-0101 or (571)-272-4200. 
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Privacy Act Statement 



The Privacy Act of 1974 (P.L. 93-579) requires that you be given certain information in connection with 
your submission of the attached form related to a patent application or patent. Accordingly, pursuant to 
the requirements of the Act, please be advised that: (1) the general authority for the collection of this 
information is 35 U.S.C. 2(b)(2); (2) furnishing of the information solicited is voluntary; and (3) the 
principal purpose for which the information is used by the U.S. Patent and Trademark Office is to process 
and/or examine your submission related to a patent application or patent. If you do not furnish the 
requested information, the U.S. Patent and Trademark Office may not be able to process and/or examine 
your submission, which may result in termination of proceedings or abandonment of the application or 
expiration of the patent. 

The information provided by you in this form will be subject to the following routine uses: 

1 . The information on this form will be treated confidentially to the extent allowed under the Freedom 
of Information Act (5 U.S.C. 552) and the Privacy Act (5 U.S.C 552a). Records from this system of 
records may be disclosed to the Department of Justice to determine whether disclosure of these 
records is required by the Freedom of Information Act. 

2. A record from this system of records may be disclosed, as a routine use, in the course of presenting 
evidence to a court, magistrate, or administrative tribunal, including disclosures to opposing counsel 
in the course of settlement negotiations. 

3. A record in this system of records may be disclosed, as a routine use, to a Member of Congress 
submitting a request involving an individual, to whom the record pertains, when the individual has 
requested assistance from the Member with respect to the subject matter of the record. 

4. A record in this system of records may be disclosed, as a routine use, to a contractor of the Agency 
having need for the information in order to perform a contract. Recipients of information shall be 
required to comply with the requirements of the Privacy Act of 1974, as amended, pursuant to 5 
U.S.C. 552a(m). 

5. A record related to an International Application filed under the Patent Cooperation Treaty in this 
system of records may be disclosed, as a routine use, to the International Bureau of the World 
Intellectual Property Organization, pursuant to the Patent Cooperation Treaty. 

6. A record in this system of records may be disclosed, as a routine use, to another federal agency for 
purposes of National Security review (35 U.S.C. 181) and for review pursuant to the Atomic Energy 
Act (42 U.S.C. 218(c)). 

7. A record from this system of records may be disclosed, as a routine use, to the Administrator, 
General Services, or his/her designee, during an inspection of records conducted by GSA as part of 
that agency's responsibility to recommend improvements in records management practices and 
programs, under authority of 44 U.S.C. 2904 and 2906. Such disclosure shall be made in accordance 
with the GSA regulations governing inspection of records for this purpose, and any other relevant 
(i.e., GSA or Commerce) directive. Such disclosure shall not be used to make determinations about 
individuals. 

8. A record from this system of records may be disclosed, as a routine use, to the public after either 
publication of the application pursuant to 35 U.S.C. 122(b) or issuance of a patent pursuant to 35 
U.S.C. 151. Further, a record may be disclosed, subject to the limitations of 37 CFR 1.14, as a 
routine use, to the public if the record was filed in an application which became abandoned or in 
which the proceedings were terminated and which application is referenced by either a published 
application, an application open to public inspection or an issued patent. 

9. A record from this system of records may be disclosed, as a routine use, to a Federal, State, or local 
law enforcement agency, if the USPTO becomes aware of a violation or potential violation of law or 
regulation. 



Notice of Allowability 



Application No. 

10/687,694 

Examiner 

RANDAL D. MORAN 



Applicant(s) 

WILLIAMSON E T AL. 
Art Unit 

2435 



~ The MAILING DATE of this communication appears on the cover sheet with the correspondence address- 

All claims being allowable, PROSECUTION ON THE MERITS IS (OR REMAINS) CLOSED in this application. If not included 
herewith (or previously mailed), a Notice of Allowance (PTOL-85) or other appropriate communication will be mailed in due course. THIS 
NOTICE OF ALLOWABILITY IS NOT A GRANT OF PATENT RIGHTS. This application is subject to withdrawal from issue at the initiative 
of the Office or upon petition by the applicant. See 37 CFR 1.313 and MPEP 1308. 

1 . This communication is responsive to amendment filed 1/27/2011 . 

2. The allowed claim(s) is/are 1,3-30 and 32-43 . 

3. ^ Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 1 9(a)-(d) or (f). 

a) ^ All b) □ Some* c) □ None of the: 

1 . ^ Certified copies of the priority documents have been received. 

2. □ Certified copies of the priority documents have been received in Application No. . 

3. □ Copies of the certified copies of the priority documents have been received in this national stage application from the 

International Bureau (PCT Rule 17.2(a)). 
* Certified copies not received: . 

Applicant has THREE MONTHS FROM THE "MAILING DATE" of this communication to file a reply complying with the requirements 
noted below. Failure to timely comply will result in ABANDONMENT of this application. 
THIS THREE-MONTH PERIOD IS NOT EXTENDABLE. 

4. □ A SUBSTITUTE OATH OR DECLARATION must be submitted. Note the attached EXAMINER'S AMENDMENT or NOTICE OF 

INFORMAL PATENT APPLICATION (PTO-152) which gives reason(s) why the oath or declaration is deficient. 

5. □ CORRECTED DRAWINGS ( as "replacement sheets") must be submitted. 

(a) □ including changes required by the Notice of Draftsperson's Patent Drawing Review ( PTO-948) attached 

1) □ hereto or 2) □ to Paper No./Mail Date . 

(b) □ including changes required by the attached Examiner's Amendment / Comment or in the Office action of 

Paper No./Mail Date . 

Identifying indicia such as the application number (see 37 CFR 1.84(c)) should be written on the drawings in the front (not the back) of 
each sheet. Replacement sheet(s) should be labeled as such in the header according to 37 CFR 1.121(d). 

6. □ DEPOSIT OF and/or INFORMATION about the deposit of BIOLOGICAL MATERIAL must be submitted. Note the 

attached Examiner's comment regarding REQUIREMENT FOR THE DEPOSIT OF BIOLOGICAL MATERIAL. 



Attachment(s) 




1 . □ Notice of References Cited (PTO-892) 


5. □ Notice of Informal Patent Application 


2. □ Notice of Draftperson's Patent Drawing Review (PTO-948) 


6. □ Interview Summary (PTO-413), 




Paper No./Mail Date . 


3. □ Information Disclosure Statements (PTO/SB/08), 


7. □ Examiner's Amendment/Comment 


Paper No./Mail Date 




4. □ Examiner's Comment Regarding Requirement for Deposit 


8. ^ Examiner's Statement of Reasons for Allowance 


of Biological Material 






9. □ Other . 


/Beemnet W Dada/ 




Primary Examiner, Art Unit 2435 
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Art Unit: 2435 

DETAILED ACTION 

Claims 1, 3-30, and 32-43 are pending. 



Allowable Subject Matter 

Claims l, 3-30, and 32-43 are allowed. 

The following is an examiner's statement of reasons for allowance: The prior art fails to 
teach or suggest alone or in combination A method of monitoring propagation of viruses 
by a first host within a network of hosts, the method comprising the following steps 
carried out by the first host: establishing a record which is at least indicative of identities 
of destination hosts within the network to whom data has been sent by a first host; 
during a first time interval, comparing (a) identities of destination hosts identified in 
requests to send data from the first host and (b) identities of destination hosts identified 
in the record; transmitting all requests to send data; and storing in a buffer data relating 
to requests which identify a destination host not in the record, wherein the record is 
established by monitoring identities of destination hosts to whom requests have been 
transmitted during a second time interval, which precedes the first time interval. 

The prior art further fails to teach A method of operating a first host within a 
network of a plurality of hosts, the method comprising the following steps carried out by 
a first host: over the course of a first time interval, monitoring creation of sockets within 
the first host to identify destination hosts identified therein; comparing identities of 
destination hosts monitored during the first time interval with destination host 
identities in a record; and storing data from all sockets which identify monitored 
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destination hosts not in the record wherein the record identifies a maximum number of 
destination hosts, the maximum number being determined in accordance with a policy. 

The prior art further fails to teach A method of monitoring propagation of viruses 
by a first host within a network of hosts, the method comprising the following steps 
carried out by the first hosts: establishing a record which is at least indicative of 
identities of destination hosts within the network to whom data has been sent by the 
first host; during a first time interval, comparing (a) identities of destination hosts 
identified in requests to send data from the first host and (b) identities of destination 
hosts identified in the record; transmitting all requests to send data; based on the result 
of the comparing, storing in a buffer data to identify as such those requests which 
identify a destination host not in the record; and determining a slack parameter based 
upon a number of successive time periods that pass when no new requests are made to 
send data from the first host to hosts not in the record and when the slack parameter 
exceeds a predetermined value, allowing unimpeded passage of data from the first host 
to destination hosts not in the record. 

Any comments considered necessary by applicant must be submitted no later 
than the payment of the issue fee and, to avoid processing delays, should preferably 
accompany the issue fee. Such submissions should be clearly labeled "Comments on 
Statement of Reasons for Allowance." 
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Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to RANDAL D. MORAN whose telephone number is 
(571)270-1255. The examiner can normally be reached on M-F: 7:00 - 4:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Vu can be reached on 571-272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Randal D. Moran/ 
Examiner, Art Unit 2435 



/Beemnet W Dada/ 

Primary Examiner, Art Unit 2435 



